CVE-2023-25072
published 2023-05-10CVE-2023-25072: Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to decrypt password…
PriorityP350high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.83%
53.0th percentile
Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| seiko-sol | skybridge_mb-a100_firmware | <= 4.2.0 | — |
| seiko-sol | skybridge_mb-a110_firmware | <= 4.2.0 | — |
| seiko_solutions_inc | skybridge_mb-a100_110 | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://jvn.jp/en/jp/JVN40604023/https://www.seiko-sol.co.jp/archives/73969/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/https://jvn.jp/en/jp/JVN40604023/https://www.seiko-sol.co.jp/archives/73969/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/
2023-05-10
Published